Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/06651ef59fe5ae8a662d749f1ef5b20944cedde7.roa
File:                     06651ef59fe5ae8a662d749f1ef5b20944cedde7.roa (raw, json)
Hash identifier:          RamkqvS6hvpVutePnHmXPigyij/98XUsi3QuqZDx4jE=
Subject key identifier:   20:EB:7D:2D:BC:70:92:9F:4F:79:CD:83:06:BC:C5:3B:CB:40:70:D1
Certificate issuer:       /CN=da7e1e0969a850c5aa01b86fd390cf980dd8c296
Certificate serial:       0350CD
Authority key identifier: F7:5F:6C:67:91:04:33:82:42:23:86:0B:C5:F5:61:22:4E:70:62:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e1e0969a850c5aa01b86fd390cf980dd8c296.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/06651ef59fe5ae8a662d749f1ef5b20944cedde7.roa
Signing time:             Tue 15 Jun 2021 20:43:10 +0000
ROA not before:           Tue 15 Jun 2021 03:00:00 +0000
ROA not after:            Thu 15 Jun 2023 03:00:00 +0000
asID:                     265761
IP address blocks:        2803:7bc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217293 (0x350cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7e1e0969a850c5aa01b86fd390cf980dd8c296
        Validity
            Not Before: Jun 15 03:00:00 2021 GMT
            Not After : Jun 15 03:00:00 2023 GMT
        Subject: CN=06651ef59fe5ae8a662d749f1ef5b20944cedde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:4e:ba:2b:cf:a3:98:78:72:1d:43:f9:56:
                    4f:39:73:41:68:5b:42:89:0c:87:e3:ce:ef:2d:09:
                    fe:e8:0e:b1:17:69:3a:4e:4e:19:91:1e:69:eb:a1:
                    cd:ad:d1:ec:41:7a:7e:03:7a:68:36:d5:ad:65:54:
                    c2:ea:c6:2b:67:8e:84:c1:91:9d:69:36:7b:54:e5:
                    86:11:b5:40:10:12:76:0a:58:6b:26:80:f7:55:2f:
                    e6:f2:fc:26:c1:d5:54:7d:9a:69:33:45:f1:bc:fd:
                    ee:47:97:97:a8:19:f9:19:ba:c3:14:cb:67:b0:a8:
                    70:a5:2e:b3:8b:90:fd:9f:85:05:93:f3:e6:96:4a:
                    37:ea:1b:fd:bb:e5:f9:ef:1a:b3:43:a9:95:c9:96:
                    fb:86:17:9d:3e:e7:6f:8e:ab:20:a1:b4:90:fa:ab:
                    7a:0e:2f:c1:d1:99:8f:96:05:ec:72:5d:b9:84:05:
                    10:50:7f:2f:2b:dc:cf:d1:2a:c8:da:c7:c7:fb:67:
                    c6:76:ba:fe:13:5b:79:11:9f:4e:0f:30:c3:2c:61:
                    3b:c5:d2:59:fc:7d:34:bf:a3:48:37:02:b6:2d:39:
                    9b:f6:f4:c4:62:6a:12:e9:1d:7d:5d:95:8f:54:7b:
                    44:a7:60:dd:48:1f:76:09:de:94:bf:53:c8:a2:64:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EB:7D:2D:BC:70:92:9F:4F:79:CD:83:06:BC:C5:3B:CB:40:70:D1
            X509v3 Authority Key Identifier:
                keyid:F7:5F:6C:67:91:04:33:82:42:23:86:0B:C5:F5:61:22:4E:70:62:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e1e0969a850c5aa01b86fd390cf980dd8c296.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/06651ef59fe5ae8a662d749f1ef5b20944cedde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/da7e1e0969a850c5aa01b86fd390cf980dd8c296.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:df:dc:f0:cd:54:ec:83:31:34:e6:af:67:a0:e8:f2:1f:
         1e:3a:fe:86:77:9e:41:04:b1:93:07:df:cc:78:ca:d1:fe:46:
         57:f9:5d:f8:f9:d0:dc:4c:4d:96:c4:69:16:62:1b:7e:b0:2f:
         8f:85:21:00:b3:7e:06:b6:72:a5:0a:ae:c3:87:2e:5d:6a:39:
         a9:9a:ba:2a:33:a2:8e:14:e5:b3:e2:7b:60:61:99:10:08:bc:
         93:98:62:b8:6f:b5:d8:fc:0c:87:e5:fa:6c:ff:0b:c5:7f:86:
         67:45:0e:e3:79:a8:a9:17:d9:64:82:8d:e0:8c:d7:4a:c7:23:
         45:60:6f:05:a6:b7:52:e9:8f:d8:5d:b6:e3:d0:99:1f:1a:f8:
         e9:93:57:4f:fd:1c:16:e6:5c:41:c5:62:4f:93:ed:47:a7:b6:
         3e:44:07:eb:50:3f:e1:80:b0:69:ad:f7:8c:f5:fb:4e:c6:35:
         52:db:01:6e:2d:a8:51:51:49:52:80:3c:7e:f9:0b:f8:cd:fb:
         59:9d:d6:d9:46:ea:70:ae:5c:8e:b5:dc:f8:ce:39:7a:2c:43:
         ef:54:b0:d2:1a:08:31:d6:1c:a6:19:16:13:80:71:8a:83:08:
         0f:d1:c1:d7:5e:08:e7:63:e0:08:61:40:a1:a8:e0:49:9b:56:
         b5:e5:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----